Warning: Permanently added '10.128.15.193' (ECDSA) to the list of known hosts. 2020/05/23 18:38:32 fuzzer started 2020/05/23 18:38:32 dialing manager at 10.128.0.26:38661 2020/05/23 18:38:33 syscalls: 3055 2020/05/23 18:38:33 code coverage: enabled 2020/05/23 18:38:33 comparison tracing: enabled 2020/05/23 18:38:33 extra coverage: enabled 2020/05/23 18:38:33 setuid sandbox: enabled 2020/05/23 18:38:33 namespace sandbox: enabled 2020/05/23 18:38:33 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 18:38:33 fault injection: enabled 2020/05/23 18:38:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 18:38:33 net packet injection: enabled 2020/05/23 18:38:33 net device setup: enabled 2020/05/23 18:38:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 18:38:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 18:38:33 USB emulation: enabled 18:40:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) syzkaller login: [ 179.619286][ T6799] IPVS: ftp: loaded support on port[0] = 21 18:40:33 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3d}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) [ 179.773911][ T6799] chnl_net:caif_netlink_parms(): no params data found [ 179.899875][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.922285][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.932594][ T6799] device bridge_slave_0 entered promiscuous mode [ 179.956302][ T6929] IPVS: ftp: loaded support on port[0] = 21 [ 179.963256][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.970432][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.981450][ T6799] device bridge_slave_1 entered promiscuous mode [ 180.036518][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.068932][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 18:40:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 180.132880][ T6799] team0: Port device team_slave_0 added [ 180.155215][ T6799] team0: Port device team_slave_1 added [ 180.216825][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.227408][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.260915][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.286756][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.295075][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.325579][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.338144][ T6929] chnl_net:caif_netlink_parms(): no params data found 18:40:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2e}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1c}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000780)) sendfile(r4, r3, 0x0, 0x100000001) [ 180.465164][ T6799] device hsr_slave_0 entered promiscuous mode [ 180.541408][ T6799] device hsr_slave_1 entered promiscuous mode [ 180.641353][ T7068] IPVS: ftp: loaded support on port[0] = 21 18:40:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x5, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2}, "00006371ae9b1c01"}}}}}, 0x0) [ 180.830611][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.838193][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.843750][ T7100] IPVS: ftp: loaded support on port[0] = 21 [ 180.847082][ T6929] device bridge_slave_0 entered promiscuous mode [ 180.875628][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.891172][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.911045][ T6929] device bridge_slave_1 entered promiscuous mode [ 181.048568][ T6929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.083311][ T6929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.206550][ T7177] IPVS: ftp: loaded support on port[0] = 21 [ 181.272432][ T6929] team0: Port device team_slave_0 added 18:40:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(r0, 0x0, 0x7a05, 0x1700) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000150a010300747c3700009d73797a30000000000900010073797a30000000000900020073797a30000000000910010073797a31000000000900020073797a30000000000900010073797a31000000000000000000000000000000009c5355436aea5eed7cba1569c4b268aa1d22d868ac2a28e41886331926b24c"], 0x5c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r3, &(0x7f0000000340)="7016e430412a416376e316241382e4c884171ef5cfb07af2ab6dadc50d017c2eb8e9dd33954bda0c7a0892c017624f416df8af03cd221c39f2bd3acc84408fb7e4fd9d0f135c23845d", 0x49, 0x8884, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r3, 0x1) [ 181.319498][ T6799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.388416][ T6799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.448104][ T6929] team0: Port device team_slave_1 added [ 181.487424][ T6799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.527108][ T6799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.594028][ T7068] chnl_net:caif_netlink_parms(): no params data found [ 181.612749][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.619713][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.651549][ T6929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.666996][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.675504][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.702184][ T6929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.722021][ T7316] IPVS: ftp: loaded support on port[0] = 21 [ 181.728123][ T7100] chnl_net:caif_netlink_parms(): no params data found [ 181.826018][ T6929] device hsr_slave_0 entered promiscuous mode [ 181.881397][ T6929] device hsr_slave_1 entered promiscuous mode [ 181.921141][ T6929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.928970][ T6929] Cannot create hsr debugfs directory [ 182.077510][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.086762][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.095787][ T7068] device bridge_slave_0 entered promiscuous mode [ 182.120352][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.128264][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.140059][ T7100] device bridge_slave_0 entered promiscuous mode [ 182.153759][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.161883][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.171318][ T7068] device bridge_slave_1 entered promiscuous mode [ 182.193228][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.209320][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.217603][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.226108][ T7100] device bridge_slave_1 entered promiscuous mode [ 182.268430][ T7068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.347504][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.445644][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.458720][ T7068] team0: Port device team_slave_0 added [ 182.469489][ T7177] chnl_net:caif_netlink_parms(): no params data found [ 182.486711][ T7316] chnl_net:caif_netlink_parms(): no params data found [ 182.511410][ T7068] team0: Port device team_slave_1 added [ 182.543281][ T7100] team0: Port device team_slave_0 added [ 182.605955][ T7100] team0: Port device team_slave_1 added [ 182.623757][ T6929] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.679107][ T6929] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.737092][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.747813][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.776487][ T7068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.789500][ T6929] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.849702][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.857314][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.884859][ T7068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.902118][ T6929] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.961089][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.968047][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.996933][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.014149][ T6799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.058568][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.066097][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.092752][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.138988][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.147976][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.157086][ T7177] device bridge_slave_0 entered promiscuous mode [ 183.166131][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.175494][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.184205][ T7316] device bridge_slave_0 entered promiscuous mode [ 183.234559][ T7068] device hsr_slave_0 entered promiscuous mode [ 183.301344][ T7068] device hsr_slave_1 entered promiscuous mode [ 183.341030][ T7068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.348603][ T7068] Cannot create hsr debugfs directory [ 183.355919][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.364170][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.373500][ T7177] device bridge_slave_1 entered promiscuous mode [ 183.381163][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.390053][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.406196][ T6799] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.416820][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.425473][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.434018][ T7316] device bridge_slave_1 entered promiscuous mode [ 183.506605][ T7100] device hsr_slave_0 entered promiscuous mode [ 183.551549][ T7100] device hsr_slave_1 entered promiscuous mode [ 183.621573][ T7100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.629227][ T7100] Cannot create hsr debugfs directory [ 183.659592][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.712386][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.730509][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.779447][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.790248][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.805310][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.812877][ T2502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.823554][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.832580][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.842166][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.849233][ T2502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.857136][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.870566][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.917316][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.927189][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.938947][ T7177] team0: Port device team_slave_0 added [ 183.953455][ T7177] team0: Port device team_slave_1 added [ 183.980059][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.993180][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.021403][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.035593][ T7316] team0: Port device team_slave_0 added [ 184.047035][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.054117][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.081311][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.124122][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.133562][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.142394][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.157972][ T7316] team0: Port device team_slave_1 added [ 184.217571][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.228763][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.258737][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.265830][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.296973][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.327121][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.336734][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.346048][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.357204][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.370633][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.385840][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.393148][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.420283][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.484921][ T7177] device hsr_slave_0 entered promiscuous mode [ 184.541535][ T7177] device hsr_slave_1 entered promiscuous mode [ 184.580976][ T7177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.588827][ T7177] Cannot create hsr debugfs directory [ 184.715092][ T7316] device hsr_slave_0 entered promiscuous mode [ 184.771616][ T7316] device hsr_slave_1 entered promiscuous mode [ 184.831642][ T7316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.839218][ T7316] Cannot create hsr debugfs directory [ 184.888807][ T6929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.930225][ T6799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.945717][ T7068] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.968042][ T7068] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.004341][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.011952][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.055541][ T7068] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.104427][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.114023][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.138190][ T7068] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.215817][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.224540][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.237512][ T7100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.281962][ T6929] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.303719][ T7100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.391680][ T7100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.445954][ T7100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.500939][ T6799] device veth0_vlan entered promiscuous mode [ 185.518969][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.528039][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.537792][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.544925][ T2502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.553668][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.564062][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.572692][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.581506][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.591490][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.598598][ T2502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.606335][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.616054][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.624516][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.632866][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.668401][ T6799] device veth1_vlan entered promiscuous mode [ 185.723701][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.734642][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.745506][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.755039][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.764368][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.831436][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.839468][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.849203][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.858259][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.867575][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.881535][ T6929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.893465][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.913351][ T7177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.989852][ T7177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.054701][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.065638][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.113452][ T7177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.159747][ T7177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.216727][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.226303][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.263178][ T6799] device veth0_macvtap entered promiscuous mode [ 186.272057][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.280350][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.288953][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.329486][ T6929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.343517][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.354025][ T7316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.427052][ T7316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 186.496062][ T6799] device veth1_macvtap entered promiscuous mode [ 186.506131][ T7316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.586560][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.606226][ T7316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.649951][ T7068] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.657951][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.666895][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.688114][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.725372][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.736046][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.745341][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.754548][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.763186][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.773096][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.782993][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.792694][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.801621][ T2503] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.808794][ T2503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.817779][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.827155][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.838464][ T2503] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.845859][ T2503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.853929][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.872881][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.893898][ T7100] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.907775][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.927910][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.940435][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.951811][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.989568][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.999261][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.010247][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.017676][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.027174][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.037461][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.046303][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.053710][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.062394][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.072511][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.081861][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.090442][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.102589][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.110878][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.120192][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.128812][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.163457][ T6929] device veth0_vlan entered promiscuous mode [ 187.181571][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.192616][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.201857][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.211615][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.220238][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.230128][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.239922][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.250828][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.268820][ T7068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.281225][ T7068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.375382][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.384727][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.394750][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.404314][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.414614][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.423846][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.433293][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.444288][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.458835][ T6929] device veth1_vlan entered promiscuous mode [ 187.617061][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.635160][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.651271][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.688468][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.723864][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 18:40:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 187.742417][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.763721][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.786445][ T6929] device veth0_macvtap entered promiscuous mode [ 187.818733][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.830097][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.845112][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.856193][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.877016][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.895454][ T6929] device veth1_macvtap entered promiscuous mode [ 187.909463][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 18:40:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 187.922742][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.940142][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.968553][ T7316] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.003080][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.031884][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.044569][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.054132][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.070550][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.081992][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.090721][ T2486] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.098066][ T2486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.108205][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:40:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 188.162117][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.174584][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.192083][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.199633][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.219625][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.230208][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.243501][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.250846][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.260332][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.269543][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.287057][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.305821][ T6929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.317687][ T6929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.338085][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_0 18:40:42 executing program 0: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 188.362646][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.379297][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.388800][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.405335][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.413245][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.426169][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.435918][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.446913][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 18:40:42 executing program 0: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 188.457116][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.467856][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.478098][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.530225][ T7068] device veth0_vlan entered promiscuous mode [ 188.553155][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 18:40:42 executing program 0: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 188.572655][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:40:42 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 188.601913][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.639071][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.662258][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.682248][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.703493][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.732846][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.818196][ T6929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 188.830097][ T6929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.873984][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.910860][ T7068] device veth1_vlan entered promiscuous mode [ 188.931346][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.939809][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.950186][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.962041][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.970785][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.979708][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.990084][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.999126][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.008564][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.017846][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.028822][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.042436][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.065353][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.074626][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.085094][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.094962][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.105426][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.132548][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.143871][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.176970][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.245242][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.254060][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.266406][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.275280][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.284193][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.292822][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.301095][ T7100] device veth0_vlan entered promiscuous mode [ 189.451601][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.458958][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.481367][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.528157][ T7100] device veth1_vlan entered promiscuous mode [ 189.544273][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 18:40:43 executing program 1: [ 189.573813][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.602596][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.612817][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.645821][ T7068] device veth0_macvtap entered promiscuous mode [ 189.695186][ T7068] device veth1_macvtap entered promiscuous mode [ 189.770602][ T7068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.821515][ T7068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.841363][ T7068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.861091][ T7068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.883456][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.913731][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.932460][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.951849][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.973472][ T7068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.988750][ T7068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.007888][ T7068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.027629][ T7068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.039992][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.060366][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.070721][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.083627][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.092824][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.109094][ T7100] device veth0_macvtap entered promiscuous mode [ 190.133191][ T7100] device veth1_macvtap entered promiscuous mode [ 190.279974][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.288751][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.297980][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.309879][ T0] NOHZ: local_softirq_pending 08 [ 190.310988][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.324934][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.335965][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.369130][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.379894][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.389985][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.398711][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.495265][ T7177] device veth0_vlan entered promiscuous mode [ 190.504987][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.518651][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.530086][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.543021][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.554188][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.566454][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.588919][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.610355][ T7316] device veth0_vlan entered promiscuous mode [ 190.620381][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.647045][ T7177] device veth1_vlan entered promiscuous mode [ 190.659075][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.673970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.686227][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.697941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.709286][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.722753][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.735770][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.747459][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.758796][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.769390][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.780579][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.795137][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.819054][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.827320][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.836674][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.846917][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.862124][ T7316] device veth1_vlan entered promiscuous mode 18:40:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 190.886263][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.048427][ T8112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.120851][ T7177] device veth0_macvtap entered promiscuous mode [ 191.144868][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.155558][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.170763][ T7177] device veth1_macvtap entered promiscuous mode [ 191.208986][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.232366][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.250528][ T7316] device veth0_macvtap entered promiscuous mode [ 191.273510][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.286922][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.296384][ T28] audit: type=1804 audit(1590259245.264:2): pid=8119 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/0/cgroup.controllers" dev="sda1" ino=15754 res=1 [ 191.304253][ T3182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.349141][ T7316] device veth1_macvtap entered promiscuous mode [ 191.384977][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.411149][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.437279][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.453131][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.464753][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.477970][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.492806][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.510190][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.527779][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.559401][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.569016][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.581024][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.596800][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.610277][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.620594][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.632920][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.643822][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.655760][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.670408][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.684190][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.697678][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.715677][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.725352][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.756353][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.768272][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.779571][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.792183][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.804281][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.816499][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.829370][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.842341][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.855528][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.867076][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.880437][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.894745][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.907780][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.919834][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.932958][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.944335][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.956477][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.966980][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 191.978116][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.990216][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.002253][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.020427][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.067371][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.082407][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.100832][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.113269][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:40:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2e}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1c}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000780)) sendfile(r4, r3, 0x0, 0x100000001) 18:40:46 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 192.495241][ T28] audit: type=1804 audit(1590259246.464:3): pid=8129 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/1/cgroup.controllers" dev="sda1" ino=15757 res=1 18:40:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x5}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xb, "00cd0e"}}}}}, 0x2e) 18:40:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:47 executing program 4: pipe(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x328, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0x27}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) 18:40:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 18:40:47 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) 18:40:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2e}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1c}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000780)) sendfile(r4, r3, 0x0, 0x100000001) 18:40:47 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0x3b7a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 193.375192][ T8160] No such timeout policy "syz1" [ 193.382480][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.476297][ T8179] [ 193.483660][ T8179] ********************************************************** [ 193.515474][ T8179] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** 18:40:47 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 193.544236][ T8179] ** ** [ 193.568820][ T8179] ** trace_printk() being used. Allocating extra memory. ** [ 193.595204][ T8179] ** ** [ 193.601036][ T28] audit: type=1804 audit(1590259247.564:4): pid=8165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/2/cgroup.controllers" dev="sda1" ino=15780 res=1 [ 193.618493][ T8179] ** This means that this is a DEBUG kernel and it is ** 18:40:47 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 193.699271][ T8179] ** unsafe for production use. ** [ 193.727391][ T8179] ** ** [ 193.765433][ T8179] ** If you see this message and you are not debugging ** [ 193.786980][ T8179] ** the kernel, report this immediately to your vendor! ** 18:40:47 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private=0xa010102}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 193.828178][ T8179] ** ** [ 193.883296][ T8179] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 193.909595][ T8179] ********************************************************** 18:40:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, 0x0) 18:40:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 194.138324][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:40:48 executing program 5: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) getxattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)=@random={'user.', 'ppp1(vmnet1\x00'}, 0x0, 0x0) 18:40:48 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, 0x0) 18:40:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2e}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1c}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000780)) sendfile(r4, r3, 0x0, 0x100000001) 18:40:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x60}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 18:40:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, 0x0) 18:40:48 executing program 1: epoll_create1(0x0) close(0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 18:40:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fbeb3d7740700000000000000920000001000000092000000ffffff00000000000000000061"], &(0x7f00000001c0)=""/270, 0x46, 0x10e, 0x8}, 0x20) [ 194.401609][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:40:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) [ 194.535732][ T8234] BPF: type_id=7 offset=0 size=146 [ 194.565423][ T8234] BPF: [ 194.569788][ T28] audit: type=1804 audit(1590259248.534:5): pid=8222 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/3/cgroup.controllers" dev="sda1" ino=15771 res=1 [ 194.575120][ T8234] BPF:Not a VAR kind member [ 194.616040][ T8236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:40:48 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 194.691505][ T8234] BPF: [ 194.691505][ T8234] 18:40:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) 18:40:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 194.722735][ T8234] BPF: type_id=7 offset=0 size=146 [ 194.762438][ T8234] BPF: [ 194.775806][ T8234] BPF:Not a VAR kind member [ 194.809994][ T8234] BPF: [ 194.809994][ T8234] 18:40:48 executing program 5: r0 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) getdents64(r0, 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) [ 194.848574][ T8248] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:40:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) 18:40:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2e}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1c}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000780)) 18:40:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:49 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) [ 195.118953][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:40:49 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 195.168272][ T8264] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.228453][ T28] audit: type=1804 audit(1590259249.193:6): pid=8268 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/4/cgroup.controllers" dev="sda1" ino=15790 res=1 18:40:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:49 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000080)=""/67) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x55, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 18:40:49 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x40, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2e}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1c}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 18:40:49 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x2) [ 195.456386][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.604748][ T8280] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 195.631305][ T28] audit: type=1804 audit(1590259249.593:7): pid=8288 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/5/cgroup.controllers" dev="sda1" ino=15791 res=1 [ 195.671048][ T8280] ref_ctr decrement failed for inode: 0x3da3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000b5dded13 [ 195.713571][ T8280] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 195.737502][ T8280] ref_ctr decrement failed for inode: 0x3da3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000b5dded13 [ 195.905575][ T8280] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 195.924074][ T8280] ref_ctr decrement failed for inode: 0x3da3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000b5dded13 [ 195.952998][ T8280] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 195.971782][ T8280] ref_ctr decrement failed for inode: 0x3da3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000b5dded13 18:40:50 executing program 5: socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 18:40:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:50 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18:40:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:40:50 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:50 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 196.196160][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.232636][ T28] audit: type=1804 audit(1590259250.203:8): pid=8309 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/7/bus" dev="sda1" ino=15801 res=1 [ 196.335978][ T28] audit: type=1804 audit(1590259250.253:9): pid=8308 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/6/cgroup.controllers" dev="sda1" ino=15800 res=1 18:40:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:40:50 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000000c0)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000000680), 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 18:40:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:50 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 196.511440][ T8321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:40:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 196.609101][ T28] audit: type=1804 audit(1590259250.573:10): pid=8323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/7/cgroup.controllers" dev="sda1" ino=15800 res=1 18:40:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) [ 196.760882][ T8334] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.915806][ T28] audit: type=1804 audit(1590259250.883:11): pid=8339 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/8/cgroup.controllers" dev="sda1" ino=15793 res=1 [ 196.966897][ C0] hrtimer: interrupt took 31080 ns [ 197.028292][ T28] audit: type=1804 audit(1590259250.993:12): pid=8344 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/7/bus" dev="sda1" ino=15801 res=1 18:40:51 executing program 5: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000240)=@random={'trusted.', 'pp\x1d\xf2\xae\x9cAK\xad8S\xa0?\x10z\xd1\xd7]4\r\x83\x80\xa4\x05e\xf4\x1c\xe0\x17Y\xd2J\xab$L\xa0A\xaf\xce\xb6\x03\xae\\\xabd{\xd4\xa2u\a9\x15L`\n\xc2\xc8\xcb\xd2\xa3W\x01\x0e#\x7f\xe8>\xa3\x96\x1e\x1c\x9b\xcfVE\xac\xd0\xa8RnG\x15N\xed\xa0\xa4\r\xdfI\x98\x95\xb2\xfcp\xb4\xe6/u\xbc\x84\xb7\x14N6\x93W*\x9a\xce\x14\xb6\xb8\xd6\xc7\vZX\x95qb1M3\x82\x13\xff\'\x8b\xd1\xa5\fv\xc7$b\xd9\xab<\xda\xf8n\x9d\xc6\x86\xe4\xd7\x8e\xacR\xce9\xed\xc7\x15\xc1\x99fM\x01\xcd\x02TW\xeaE\x98\nM\xdc3\xa3OI\xa8\xd6,\xbe\xa2\xf4@\xf9q;\x16\xda!R-\x1f\xe1\xe8\fU\xf7>\xaa\x9b\xc2\xa1\xac*\xf8\x1e-\xfd\x05\xee3/\xa2\xb3q\x17^Q*4\xde7\xf2F\xae\x88\xdeQ\x96\x92\xa7\xe10xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:51 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/132, 0x84}], 0x1) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 18:40:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 18:40:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000200)="80", 0x4002}, {&(0x7f00000002c0)="b0", 0x1}, {&(0x7f0000000480)="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", 0xb81}, {&(0x7f0000000380)="15", 0x1}, {&(0x7f0000001480)="c2", 0x1}, {&(0x7f0000001540)='c', 0x1}, {&(0x7f0000000140)="1c", 0x1}, {&(0x7f0000001640)='W', 0x1}, {&(0x7f0000001740)="230ee61074e6ff3fd318d6a3764c40f71aa6ac6cd17c6eff00d6c4716f15dc91eba70359cd6f7f3034fb9a87cab04c5aee4913f52403970f64ebd8b58f46b0a0a1c9e125f40ea63db8de1fbfb0b51315936fb83d80f0753a08f4820b9053dc4573d1077b8bb65eead142aaffd6e2e8f0c51555e6aedabe755c39edd9a8af6122e94533dfd932059d2c105592258e388092d12612d8c1eece7aa42f59776711db8acb9c99a2eb5692d4802b916896e6394fa7e86fec6740b93a4036c5b54777c87d9f0bc64ffc2a38df031e514c585a3b29c427306d4facefaf48487b76f90cf3847bf62f7706675e61131899982115627e3781dbb37b0a1c916dbd49163bd2bd7310c65687778672356706a398e8e8ce36ac3d7a32120a0694396a09814aca08af652156d00235f2d33bef713e1df66bf5ce686b80e927d90ca89f1cbb535f8b6e77489470d61ddec6d52fdc004b1aeab11bbdb9440fd7945a817e45bb30b36b906893a1bab15839a2f58dd529c2b8e38bb7bcfb3327edd4af728982db2964bf97f32a296d737698af5816b0bd0ec9cb43823a51881c0281153e283eee41245c73656ad29287da85f35e5513e31d2871cb8efc4b444f4f5df89d79a14edfb9276d3da6dde382049726396aaee557d60ff38e7fc3e0ea9bbda4b712cbf864bcf5cb1d8da047caad776a95b20229f9fef6665f84888c500d3385a8605a81900455d2766f08d4eabae674d693722dd195ad646991827479a062130ca06783f2989e4b82c4a03c37969b3cef2d8f574da221d70b2a91087d19dc65710b479fe68a1dcac341a6179f67e91f37fbc4b212b3194f0a9c59dcd6118e5ff0f343c9efc73ef9982c32a0434faaad3024f492fb27cd123cd4651d28b159106767fcea0653a38b8e10896ab35722cf49fa533328835309abe84f2c0483da84880da5f76daf6a9424a82e5f2f5aba5f35fed8f40157b7cc2ba2ebc307c2e379766ae567bf629b42d20a8701a33a209fa29c4f8336cf7e3dc32455b8a1f760d11412135e467ac054276d59f6e688c8cdfa4a375931e54ec7f13065623599281b9aee2a693bd588c203f82773e2e2e1b4b03ac8f068c954fdbae55c6f14a4f426ab9c49baa599124c7030e17e9eb17f66315dedc0dd2dc26273b232f0e82646e3846ba3896441269dcd3aa1986fdc7af07d0aa368b54808544b9ff52221bcf956dd80120084cf2629156123d1624947f566938c2cb2bdfeeb37125f45ab4ae4e4183aa63f5c04d6333393a568521b849400d9a619e1714972f3fa9073918c64ca6e65b5a792b4f2ca5140592649e34ab0b4640df11257608652deec3e37c3b43cde7aba08a76ce72060cc5d9d1b4165d9064b94a81fa3ed52fece3dafee77ea9328257878e7f6677268ec91c82f3aa6b8e7c5cf222711bd438e78f575f8679d06f63938797d8e58b331c3c2ed3cba8d8770add14892aca017bf4e3c77c240db7f2d5188a7a9903791a397c9de74abcb2d915a81a191b48ca1cc3311cb1a5b563778fc56517cd2f8dfef13fafd9d5f91db9687949c875ba7852255c7f1a6a3612350d88c336d0b1b7fc45473dfdc0730cfe950aee395313490bb98d69d72c55c5496cd167ec4500980afd84e97db4686d411a791f4e17edbe15dc59b23812e80f5a047798ca4ff3b0cb39a1130db7aac9bc63317c85aab03fd66ab1c2f38d8423aa4f72efcb85050f8b3847f2f8ee271e561d30cb630757e24f4c5e9854e7452cd4003369afbc32e7c638838f1061147348e7c58a1fc3bff125bb719954c0abe2ec58dbc3dd191a6e2ebbcd824d0b3c7d205cf2e3ad1355a83561d87cab0203303f1561590ab2dee7321474fe0b1e3df7d1c7cd4bf7728cdfab5f8506bd5d47ce040a5b8c71b5208b30e2529f753e2295182b0568837ca99ea1055752f96c57a2bc9c1f0d0710f1eab7d49c9aad48757115d19c8f4fdc108d56420c48784d02edb6b330a537ca87ea5c09c16744ef22b8eb2838df4ab86b27c33e1c836be212a0b3fb530f635081ba81cfe5e0bfffc1efe0043b02ed5ad5487aba8bd33ecd4d18a1bd8339c9881d4185f8a7c7f787fcea8ce3023e0b9b63c880b12c92a7a72c7891f081269ba06a8b2b79a2d3ca0d20952a6e61d170b44352276f4fcca7e6adcb69a4423ea55ee055152b4dd637996ba7293d37ece943118f8c1d7fa10e884efa54dbfd8d6a6b855ba50b3baa20c15f93a4e85fe34339880ed415ff63e589b7608a295f4bcb6de9b35e646c17fa57c8d64a50fc7dfd9d995962c049b215ff1e8208bba2ad3178f7ecbadd243b2ea234cebd99a0a827c1227ddfabac08beaaf078463e6c172843452ab6d2dff38334ffebf35edd49c0709494ad8d26730d0a529a48a08d509c7a466a28f2dde659650fcc193d451b752dd8e3efee3f004ae601f6fd68c771d39f02c18dc1f88993a1da4badacabbc9cdcc1190b03527ee44d4d36476e5aee731c337eb605aaaa5710047d831b1fcf4e796e8067853bdaf6b21c8a99a1f72c1164751e8bc8825d7452a06a2eab10c7e9558eb6cfc6ee3153cbbd15f6ac1cf361fe52acb7c400789f35a6950785a75084c25dd4a803a3909165ee23a3e841ff9f76115e4767a50fc4f9fd00585fb36f0f7b6f0f6ed00dc0d8964ab53f1614c98717fbc805305296bd426c4edefbaf5fb097113d5e9349df3d21d263e41ee2bb5b06b854924499a726fc92d230038a6389b522f08a4bd99d50db02f3e64edb4f0ee10bd587002c9bb12faf6ac55e0910cd4608e76f8045c752b107cc68383a4c3c770880c87c78ec58b05727d899e8075de42c59139a0a60c6a68f810ede51d38714b71d22cc7a976e0706285e803d95a6ee33f6acd289068c69c0c868d62a731fd033e0504d65ebcac8a1fc9ed4a4e476f6acffc9179bb12ab16b5227b1d4ea4006a714bf678ed5b940a649f8f8da189ed5b6d35dd466b81fbbae489588bc3300ff4d895e4ae76dadb20b189205b9b2b3e2c838bd87245cf672c566a49a8e58cdffd0743aacb6355a444d73e266f30e1ca89777d574e1512f0c4cb11adc7909cb45f2c6489a3d7a909cb5875c33f235f4e3159c7a91a88f20ee6d2cfb8f5f45c163687154e663c3e529a14d54e2ccd8dc984a6ea5d0c2428acfb1a82677fb4a89b532c3c", 0x8c1}, {&(0x7f0000000180)="8b", 0x1}], 0xa}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002880)="14", 0x1}, {&(0x7f0000002900)="b4", 0x1}, {&(0x7f0000002a00)="9c", 0x1}, {&(0x7f0000002ac0)='6', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002d40)="8a", 0x100000}, {&(0x7f0000002e00)="d4", 0x1}], 0x240}}], 0x3, 0x600d054) [ 197.131525][ T28] audit: type=1804 audit(1590259251.083:13): pid=8346 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/7/bus" dev="sda1" ino=15801 res=1 [ 197.208036][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:40:51 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 197.274783][ T28] audit: type=1804 audit(1590259251.243:14): pid=8353 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/9/cgroup.controllers" dev="sda1" ino=15801 res=1 18:40:51 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 18:40:51 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:51 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:51 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 197.604450][ T8376] overlayfs: './file0' not a directory 18:40:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) 18:40:51 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:52 executing program 0: dup(0xffffffffffffffff) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000340)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 18:40:52 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:52 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:52 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 198.161101][ T8397] overlayfs: './file0' not a directory 18:40:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, @in=@dev}, 0x0, 0x4}}, 0xf8}, 0x8}, 0x0) 18:40:52 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:52 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:52 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 198.338433][ T8406] overlayfs: './file0' not a directory [ 198.360763][ T8398] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 18:40:52 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:52 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 198.377193][ T8398] ref_ctr decrement failed for inode: 0x3dcc offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004ea6fdcd [ 198.430303][ T8398] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 198.456255][ T8398] ref_ctr decrement failed for inode: 0x3dcc offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004ea6fdcd [ 198.487774][ T8415] overlayfs: './file0' not a directory 18:40:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 18:40:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000ffeffff000700000000000000920000001000000092000000ffffff00000000000000000061"], &(0x7f00000001c0)=""/270, 0x46, 0x10e, 0x8}, 0x20) [ 198.652140][ T8398] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 198.659076][ T8419] BPF: type_id=16 offset=146 size=16777215 [ 198.668386][ T8398] ref_ctr decrement failed for inode: 0x3dcc offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004ea6fdcd [ 198.676198][ T8419] BPF: [ 198.682407][ T8419] BPF:Invalid size [ 198.690297][ T8419] BPF: [ 198.690297][ T8419] [ 198.698682][ T8419] BPF: type_id=16 offset=146 size=16777215 [ 198.707205][ T8419] BPF: [ 198.710805][ T8398] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 198.720653][ T8419] BPF:Invalid size [ 198.724574][ T8419] BPF: [ 198.724574][ T8419] [ 198.729974][ T8398] ref_ctr decrement failed for inode: 0x3dcc offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004ea6fdcd 18:40:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x22, {0x22, 0x0, "a4d9b1ce6a1541a5687a7490746f1d096cad3308cb87a01ffe4e83d10600b838"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:40:52 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:52 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:52 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8864}}}}}, 0x62) 18:40:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) [ 198.940557][ T8429] overlayfs: './file0' not a directory 18:40:52 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:53 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:53 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) 18:40:53 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 199.124645][ T8442] overlayfs: './file0' not a directory 18:40:53 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:53 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8d0}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) [ 199.271521][ T2486] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 199.312429][ T8449] overlayfs: './file0' not a directory [ 199.527968][ T2486] usb 1-1: Using ep0 maxpacket: 8 [ 199.651793][ T2486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.690880][ T2486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.710875][ T2486] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 199.731509][ T2486] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 199.740629][ T2486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.761152][ T2486] usb 1-1: config 0 descriptor?? [ 200.275584][ T2486] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x2 [ 200.283872][ T2486] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x4 [ 200.291152][ T2486] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x3 [ 200.305221][ T2486] koneplus 0003:1E7D:2E22.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 200.477854][ T2480] usb 1-1: USB disconnect, device number 2 [ 201.251470][ T2480] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 201.493343][ T2480] usb 1-1: Using ep0 maxpacket: 8 [ 201.631605][ T2480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.643609][ T2480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.653980][ T2480] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 201.667759][ T2480] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 201.677267][ T2480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.686564][ T2480] usb 1-1: config 0 descriptor?? 18:40:55 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:55 executing program 1: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:55 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 18:40:55 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18:40:55 executing program 1: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 202.021619][ T2480] usbhid 1-1:0.0: can't add hid device: -71 [ 202.033631][ T2480] usbhid: probe of 1-1:0.0 failed with error -71 18:40:56 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:56 executing program 1: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 202.089850][ T2480] usb 1-1: USB disconnect, device number 3 18:40:56 executing program 3: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) 18:40:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:56 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 18:40:56 executing program 1: mknod(0x0, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:56 executing program 3: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) 18:40:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:56 executing program 1: mknod(0x0, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:56 executing program 3: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) [ 202.433887][ T28] audit: type=1804 audit(1590259256.403:15): pid=8546 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir155952647/syzkaller.sKyWo2/12/bus" dev="sda1" ino=15847 res=1 18:40:56 executing program 1: mknod(0x0, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:56 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 18:40:57 executing program 2: r0 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:57 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000220001"], 0x14}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, @in=@dev}, 0x0, 0x4}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x8}, 0x0) 18:40:57 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) 18:40:57 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:57 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) [ 203.377480][ T8582] overlayfs: './file0' not a directory 18:40:57 executing program 2: r0 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:57 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:57 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:57 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) 18:40:57 executing program 2: r0 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 203.623024][ T8594] overlayfs: './file0' not a directory [ 203.666273][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:40:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:40:57 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:57 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) socket(0x11, 0x800000003, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:57 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:57 executing program 2: r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20108100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x0, 0x0, 0x190, 0x0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}, 0x4e48b8c34e6416cd}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast1, @mcast1, [], [], 'ipvlan1\x00', 'wg1\x00'}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@frag={{0x30, 'frag\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 18:40:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20108100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x0, 0x0, 0x190, 0x0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}, 0x4e48b8c34e6416cd}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast1, @mcast1, [], [], 'ipvlan1\x00', 'wg1\x00'}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@frag={{0x30, 'frag\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 18:40:57 executing program 2: r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:57 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, 0x0, &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 203.883854][ T8617] overlayfs: './file0' not a directory [ 203.900051][ T8623] xt_socket: unknown flags 0xcc [ 203.901322][ T8622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:40:57 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:57 executing program 3: r0 = socket(0x1e, 0x5, 0x0) shutdown(r0, 0x2) [ 203.988022][ T8630] xt_socket: unknown flags 0xcc 18:40:58 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, 0x0, &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:40:58 executing program 2: r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:58 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) socket(0x11, 0x800000003, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:58 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}]}, 0x34}}, 0x0) 18:40:58 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, 0x0, &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:58 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:40:58 executing program 3: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000070605e500004d0000000003000000000500010006"], 0x1c}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 18:40:58 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) socket(0x11, 0x800000003, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:58 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:58 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:40:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:58 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:40:58 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x1, @local}], 0x10) 18:40:58 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:58 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, 0x0) 18:40:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:40:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0), 0x4) 18:40:58 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:58 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:58 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, 0x0) [ 204.844112][ T8701] overlayfs: missing 'lowerdir' 18:40:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:58 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, 0x0) [ 204.944272][ T8710] overlayfs: missing 'lowerdir' 18:40:58 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:59 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 18:40:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 205.097208][ T8719] overlayfs: missing 'lowerdir' [ 205.198152][ T8726] overlayfs: missing 'workdir' 18:40:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:40:59 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:59 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8930, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r3}, 0x8) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') 18:40:59 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 18:40:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:59 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 205.799867][ T8744] overlayfs: missing 'workdir' 18:40:59 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:40:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:40:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:40:59 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 205.935020][ T8749] overlayfs: missing 'workdir' 18:41:00 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 206.130304][ T8759] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 206.207047][ T8759] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 18:41:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:00 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:41:00 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:00 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) 18:41:00 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 206.595932][ T8774] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore 18:41:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x18000001a) 18:41:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 206.623502][ T28] audit: type=1804 audit(1590259260.593:16): pid=8777 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/32/cgroup.controllers" dev="sda1" ino=15885 res=1 18:41:00 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:41:00 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 206.678208][ T8774] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 18:41:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:00 executing program 3: [ 206.824974][ T8790] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 206.861864][ T8790] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 18:41:01 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:41:01 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:01 executing program 3: 18:41:01 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:01 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 207.536203][ T8813] overlayfs: missing 'lowerdir' 18:41:01 executing program 3: 18:41:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:01 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:01 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:01 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 18:41:01 executing program 3: [ 207.707951][ T8823] overlayfs: missing 'lowerdir' [ 207.854079][ T8833] overlayfs: missing 'lowerdir' 18:41:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:02 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) signalfd(r0, &(0x7f0000000080), 0x8) 18:41:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:02 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'macsec0\x00', @random="01003a1e2410"}) 18:41:02 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:02 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:02 executing program 1: 18:41:02 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:02 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:03 executing program 1: 18:41:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:03 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:03 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:03 executing program 3: 18:41:03 executing program 1: 18:41:03 executing program 3: 18:41:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:03 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:03 executing program 1: 18:41:03 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:04 executing program 3: 18:41:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:04 executing program 1: 18:41:04 executing program 0: r0 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)) r1 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:04 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:04 executing program 3: 18:41:04 executing program 1: 18:41:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:04 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:04 executing program 0: r0 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)) r1 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:04 executing program 3: 18:41:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:05 executing program 1: 18:41:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:05 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:05 executing program 0: r0 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)) r1 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:05 executing program 3: 18:41:05 executing program 1: 18:41:05 executing program 3: 18:41:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:05 executing program 0: r0 = epoll_create1(0x0) close(0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r1 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r0}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:05 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:05 executing program 3: 18:41:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:05 executing program 1: 18:41:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:05 executing program 3: 18:41:05 executing program 0: r0 = epoll_create1(0x0) close(0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r1 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r0}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:05 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:06 executing program 1: 18:41:06 executing program 3: 18:41:06 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:06 executing program 0: r0 = epoll_create1(0x0) close(0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r1 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r0}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:06 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:06 executing program 3: 18:41:06 executing program 1: 18:41:06 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0xff, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:06 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:06 executing program 3: 18:41:06 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, 0x0, 0x0) 18:41:06 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:07 executing program 1: 18:41:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:07 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:07 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) 18:41:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x3f9, 0x0, 0x70bd2c, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8030}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r0, 0x100000010, 0x0, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x19, 0x8, 0x0, @tick=0x5, {0xf7, 0x1}, {0x1f, 0x1}, @raw8={"94482df2fd216c58e6d6cee1"}}], 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 18:41:07 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, 0x0, 0x0) [ 213.177107][ T9025] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:07 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:07 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:07 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, 0x0, 0x0) 18:41:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x10d040, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000e5a000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x28, &(0x7f0000000140), 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x78, [0xffe7], @string=&(0x7f00000000c0)}}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x5, &(0x7f00000012c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x78) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000014000000070000000000080000000000", @ANYRES32=0x0], 0x18}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r5, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000)="98", 0x3e80000000}]) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000200)) [ 213.434848][ T9043] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.553134][ T28] audit: type=1800 audit(1590259267.513:17): pid=9036 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15954 res=0 18:41:07 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x0, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 213.631489][ T28] audit: type=1804 audit(1590259267.573:18): pid=9036 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/56/file0/file0/bus" dev="sda1" ino=15982 res=1 18:41:07 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040), 0x0) 18:41:07 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x3f9, 0x0, 0x70bd2c, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8030}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r0, 0x100000010, 0x0, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x19, 0x8, 0x0, @tick=0x5, {0xf7, 0x1}, {0x1f, 0x1}, @raw8={"94482df2fd216c58e6d6cee1"}}], 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 18:41:07 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x0, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 213.835269][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:07 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040), 0x0) 18:41:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 214.034786][ T28] audit: type=1804 audit(1590259268.003:19): pid=9076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/57/file0/bus" dev="sda1" ino=15954 res=1 18:41:08 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:08 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040), 0x0) [ 214.191201][ T28] audit: type=1804 audit(1590259268.083:20): pid=9071 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/57/file0/bus" dev="sda1" ino=15954 res=1 [ 214.242786][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:08 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x0, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x10d040, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000e5a000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x28, &(0x7f0000000140), 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x78, [0xffe7], @string=&(0x7f00000000c0)}}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x5, &(0x7f00000012c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x78) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000014000000070000000000080000000000", @ANYRES32=0x0], 0x18}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r5, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000)="98", 0x3e80000000}]) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000200)) 18:41:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:08 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) [ 214.493348][ T9097] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:08 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x3f9, 0x0, 0x70bd2c, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8030}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r0, 0x100000010, 0x0, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x19, 0x8, 0x0, @tick=0x5, {0xf7, 0x1}, {0x1f, 0x1}, @raw8={"94482df2fd216c58e6d6cee1"}}], 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 18:41:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:08 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:08 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 214.906944][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:09 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 215.067124][ T28] audit: type=1804 audit(1590259269.033:21): pid=9120 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/58/file0/bus" dev="sda1" ino=15954 res=1 [ 215.198027][ T28] audit: type=1800 audit(1590259269.083:22): pid=9117 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15954 res=0 [ 215.226076][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:09 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 215.292866][ T28] audit: type=1804 audit(1590259269.153:23): pid=9117 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/58/file0/bus" dev="sda1" ino=15954 res=1 18:41:09 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, r3+10000000}, {0x0, 0x9}}, 0x0) r4 = gettid() tkill(r4, 0x1000000000016) getpid() waitid(0x0, 0x0, 0x0, 0x0, 0x0) 18:41:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:09 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xc, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:09 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 215.507963][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x3f9, 0x0, 0x70bd2c, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8030}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r0, 0x100000010, 0x0, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x19, 0x8, 0x0, @tick=0x5, {0xf7, 0x1}, {0x1f, 0x1}, @raw8={"94482df2fd216c58e6d6cee1"}}], 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 18:41:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:09 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:09 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 215.779017][ T9117] syz-executor.1 (9117) used greatest stack depth: 22992 bytes left 18:41:09 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 215.855369][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:10 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 216.041965][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.058428][ T28] audit: type=1804 audit(1590259270.023:24): pid=9157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/59/file0/bus" dev="sda1" ino=15954 res=1 [ 216.162233][ T28] audit: type=1804 audit(1590259270.053:25): pid=9157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/59/file0/bus" dev="sda1" ino=15954 res=1 [ 216.218607][ T28] audit: type=1800 audit(1590259270.073:26): pid=9151 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15954 res=0 [ 216.701172][ T9151] syz-executor.1 (9151) used greatest stack depth: 22520 bytes left 18:41:11 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x803, 0xff) r2 = getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x405}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 18:41:11 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0xff, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 18:41:11 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x78, [0xffe7], @string=&(0x7f00000000c0)}}) 18:41:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:11 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:11 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignonneled\x00\x00\x00\x00\x00\x00', 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xc0000004, 0x0}, 0x0, 0x8, &(0x7f0000000040)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/nfsfs\x00') 18:41:11 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x800000000086, 0x0, 0x0, 0x0, 0x0) 18:41:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:12 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x803, 0xff) r2 = getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x405}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 18:41:12 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="ae", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[], 0x8) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 18:41:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001b00000000000000ff0f0000000000000000000000040000ff0f000000200000000000000000000048004354000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = dup2(r0, r0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0x108, 0x0, 0x108, 0x248, 0x0, 0x318, 0x318, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @local}, @remote, [], [], 'bridge_slave_0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], '\x00', 'netdevsim0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bridge0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3590, 0x1}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7eedfcb331f3ae839a733f3041901a8d235bd39675399e5719d27a532748"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001b00000000000000ff0f0000000000000000000000040000ff0f000000200000000000000000000048004354000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d5630000000000000000000000000000000028"], 0x1) 18:41:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 218.509218][ T9214] x_tables: duplicate underflow at hook 3 [ 218.519800][ T9215] __nla_validate_parse: 4 callbacks suppressed [ 218.519811][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.523635][ T9214] x_tables: duplicate underflow at hook 3 18:41:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="ae", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[], 0x8) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 18:41:12 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 218.593458][ T9214] x_tables: duplicate underflow at hook 3 [ 218.624585][ T9219] x_tables: duplicate underflow at hook 3 18:41:12 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x803, 0xff) r2 = getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x405}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 18:41:12 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)) 18:41:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 219.075570][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 219.075583][ T28] audit: type=1804 audit(1590259273.043:29): pid=9224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/56/bus" dev="sda1" ino=16018 res=1 [ 219.174771][ T28] audit: type=1804 audit(1590259273.143:30): pid=9240 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir643754430/syzkaller.liiiJy/63/bus" dev="sda1" ino=16004 res=1 18:41:15 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x803, 0xff) r2 = getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x405}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 18:41:15 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="ae", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[], 0x8) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x36) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) 18:41:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:15 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$RTC_ALM_SET(r0, 0x7005, &(0x7f0000000100)={0x0, 0x21, 0x0, 0x4, 0x0, 0x77, 0x10000007}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003600)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x7001, 0x0) 18:41:15 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 221.811220][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.876684][ T9270] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 18:41:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 221.925328][ T9275] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.053613][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.246413][ T28] audit: type=1804 audit(1590259276.215:31): pid=9268 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/57/bus" dev="sda1" ino=16017 res=1 18:41:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000200)="fd9065f9564174", 0x7}, {&(0x7f0000000140)="bffbfff3bc86dd", 0x9c7}], 0x2) 18:41:16 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:16 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$RTC_ALM_SET(r0, 0x7005, &(0x7f0000000100)={0x0, 0x21, 0x0, 0x4, 0x0, 0x77, 0x10000007}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003600)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x7001, 0x0) [ 222.599516][ T9289] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 18:41:17 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x803, 0xff) r2 = getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x405}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 18:41:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:17 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$RTC_ALM_SET(r0, 0x7005, &(0x7f0000000100)={0x0, 0x21, 0x0, 0x4, 0x0, 0x77, 0x10000007}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003600)=ANY=[@ANYBLOB="480000001000050700", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x7001, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x20000801) 18:41:17 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:17 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 223.341732][ T9314] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:41:17 executing program 1: r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$RTC_ALM_SET(r0, 0x7005, &(0x7f0000000100)={0x0, 0x21, 0x0, 0x0, 0x0, 0x77, 0x10000007}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003600)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x7001, 0x0) [ 223.404725][ T9316] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 18:41:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 223.488054][ T9320] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 18:41:17 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x40000000004, 0x141602) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$evdev(r0, &(0x7f000004d000)=[{}], 0xfffffe82) socket(0x0, 0x0, 0x0) [ 223.578542][ T9326] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:41:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 223.640244][ T9330] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:41:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x40000000004, 0x141602) readv(0xffffffffffffffff, 0x0, 0x0) write$evdev(r0, &(0x7f000004d000)=[{}], 0xfffffe82) [ 224.185873][ T28] audit: type=1804 audit(1590259278.155:32): pid=9324 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir239524052/syzkaller.qEznzf/58/bus" dev="sda1" ino=16033 res=1 18:41:18 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x7f, 0x3, 0x5}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x9, 0x0, r0}, 0x40) 18:41:18 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44}) 18:41:18 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) 18:41:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) 18:41:18 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:18 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:41:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000404c05d50340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000580)='/dev/hidraw#\x00', 0x0, 0x4000) 18:41:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:19 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 225.171071][ T9378] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:41:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 225.358999][ T2503] usb 5-1: new high-speed USB device number 2 using dummy_hcd 18:41:19 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) [ 225.770023][ T2503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.814500][ T2503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.876119][ T2503] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.40 [ 225.926188][ T2503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.940535][ T2503] usb 5-1: config 0 descriptor?? 18:41:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 18:41:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) 18:41:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001000000d4"], 0x54}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:41:19 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x40002016}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0xf0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 18:41:20 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) [ 226.425754][ T2503] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0002/input/input5 [ 226.471996][ T2503] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 226.738669][ T3182] usb 5-1: USB disconnect, device number 2 [ 226.772656][ T3182] ================================================================== [ 226.781903][ T3182] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 226.789622][ T3182] Read of size 8 at addr ffff88804f2d0150 by task kworker/0:9/3182 [ 226.797778][ T3182] [ 226.800223][ T3182] CPU: 0 PID: 3182 Comm: kworker/0:9 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 226.810392][ T3182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.820605][ T3182] Workqueue: usb_hub_wq hub_event [ 226.825673][ T3182] Call Trace: [ 226.829019][ T3182] dump_stack+0x18f/0x20d [ 226.833613][ T3182] ? __mutex_lock+0x1033/0x13c0 [ 226.838500][ T3182] ? __mutex_lock+0x1033/0x13c0 [ 226.843538][ T3182] print_address_description.constprop.0.cold+0xd3/0x413 [ 226.850590][ T3182] ? joydev_disconnect+0x3d/0xb0 [ 226.855551][ T3182] ? __input_unregister_device+0x1b0/0x430 [ 226.861380][ T3182] ? input_unregister_device+0xb4/0xf0 [ 226.866953][ T3182] ? hidinput_disconnect+0x15e/0x3d0 [ 226.872264][ T3182] ? hid_disconnect+0x13f/0x1a0 [ 226.877300][ T3182] ? vprintk_func+0x97/0x1a6 [ 226.881917][ T3182] ? __mutex_lock+0x1033/0x13c0 [ 226.886797][ T3182] kasan_report.cold+0x1f/0x37 [ 226.893931][ T3182] ? __mutex_lock+0x1033/0x13c0 [ 226.898911][ T3182] __mutex_lock+0x1033/0x13c0 [ 226.903615][ T3182] ? print_usage_bug+0x240/0x240 [ 226.908723][ T3182] ? joydev_cleanup+0x21/0x190 [ 226.913904][ T3182] ? trace_hardirqs_off+0x50/0x220 [ 226.919123][ T3182] ? mutex_trylock+0x2c0/0x2c0 [ 226.924074][ T3182] ? mark_held_locks+0x9f/0xe0 [ 226.929000][ T3182] ? kfree+0x1eb/0x2b0 [ 226.933182][ T3182] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 226.939385][ T3182] ? kfree_const+0x51/0x60 [ 226.943825][ T3182] ? dev_attr_show+0x90/0x90 [ 226.948443][ T3182] ? joydev_cleanup+0x21/0x190 [ 226.953688][ T3182] joydev_cleanup+0x21/0x190 [ 226.959008][ T3182] joydev_disconnect+0x45/0xb0 [ 226.963797][ T3182] __input_unregister_device+0x1b0/0x430 [ 226.969473][ T3182] input_unregister_device+0xb4/0xf0 [ 226.974949][ T3182] hidinput_disconnect+0x15e/0x3d0 [ 226.980085][ T3182] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 226.985852][ T3182] hid_disconnect+0x13f/0x1a0 [ 226.990975][ T3182] hid_hw_stop+0x12/0x70 [ 226.995334][ T3182] hid_device_remove+0xed/0x240 [ 227.000532][ T3182] ? sony_register_touchpad.constprop.0+0x890/0x890 [ 227.007250][ T3182] ? hid_compare_device_paths+0xc0/0xc0 [ 227.012822][ T3182] device_release_driver_internal+0x231/0x500 [ 227.018918][ T3182] bus_remove_device+0x2dc/0x4a0 [ 227.023974][ T3182] device_del+0x481/0xd30 [ 227.028808][ T3182] ? device_link_add_missing_supplier_links+0x370/0x370 [ 227.036142][ T3182] ? mark_held_locks+0x9f/0xe0 [ 227.040936][ T3182] ? _raw_spin_unlock_irq+0x1f/0x80 [ 227.046172][ T3182] hid_destroy_device+0xe1/0x150 [ 227.051160][ T3182] usbhid_disconnect+0x9f/0xe0 [ 227.055948][ T3182] usb_unbind_interface+0x1bd/0x8a0 [ 227.061173][ T3182] ? __pm_runtime_idle+0xd1/0x320 [ 227.066232][ T3182] ? usb_autoresume_device+0x60/0x60 [ 227.071647][ T3182] device_release_driver_internal+0x432/0x500 [ 227.077982][ T3182] bus_remove_device+0x2dc/0x4a0 [ 227.082963][ T3182] device_del+0x481/0xd30 [ 227.087767][ T3182] ? device_link_add_missing_supplier_links+0x370/0x370 [ 227.095041][ T3182] ? usb_remove_ep_devs+0x3e/0x80 [ 227.100343][ T3182] ? remove_intf_ep_devs+0x13f/0x1d0 [ 227.105662][ T3182] usb_disable_device+0x211/0x690 [ 227.110868][ T3182] usb_disconnect+0x284/0x8d0 [ 227.116454][ T3182] hub_event+0x17ca/0x38f0 [ 227.121264][ T3182] ? hub_port_debounce+0x260/0x260 [ 227.126547][ T3182] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 227.132744][ T3182] ? debug_smp_processor_id+0x2f/0x185 [ 227.138219][ T3182] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 227.143783][ T3182] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 227.149954][ T3182] process_one_work+0x965/0x16a0 [ 227.154979][ T3182] ? lock_release+0x800/0x800 [ 227.159795][ T3182] ? pwq_dec_nr_in_flight+0x310/0x310 [ 227.165265][ T3182] ? rwlock_bug.part.0+0x90/0x90 [ 227.170352][ T3182] worker_thread+0x96/0xe20 [ 227.175047][ T3182] ? process_one_work+0x16a0/0x16a0 [ 227.180520][ T3182] kthread+0x3b5/0x4a0 [ 227.184678][ T3182] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 227.190473][ T3182] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 227.196473][ T3182] ret_from_fork+0x24/0x30 [ 227.200888][ T3182] [ 227.203465][ T3182] Allocated by task 2503: [ 227.208059][ T3182] save_stack+0x1b/0x40 [ 227.212403][ T3182] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 227.218799][ T3182] kmem_cache_alloc_trace+0x153/0x7d0 [ 227.224455][ T3182] joydev_connect+0x83/0xd2f [ 227.229048][ T3182] input_attach_handler+0x194/0x200 [ 227.235191][ T3182] input_register_device.cold+0xf5/0x246 [ 227.241073][ T3182] hidinput_connect+0x4f8f/0xdb30 [ 227.246402][ T3182] hid_connect+0x96b/0xbc0 [ 227.250831][ T3182] hid_hw_start+0xa2/0x130 [ 227.255578][ T3182] sony_probe+0x214/0x2d0 [ 227.260090][ T3182] hid_device_probe+0x2be/0x3f0 [ 227.265241][ T3182] really_probe+0x281/0x6d0 [ 227.270100][ T3182] driver_probe_device+0xfe/0x1d0 [ 227.275171][ T3182] __device_attach_driver+0x1c2/0x220 [ 227.280550][ T3182] bus_for_each_drv+0x162/0x1e0 [ 227.285677][ T3182] __device_attach+0x21a/0x360 [ 227.291052][ T3182] bus_probe_device+0x1e4/0x290 [ 227.296148][ T3182] device_add+0xaf1/0x1900 [ 227.300711][ T3182] hid_add_device+0x33c/0x9a0 [ 227.306093][ T3182] usbhid_probe+0xac8/0xff0 [ 227.311618][ T3182] usb_probe_interface+0x305/0x7a0 [ 227.316934][ T3182] really_probe+0x281/0x6d0 [ 227.321773][ T3182] driver_probe_device+0xfe/0x1d0 [ 227.326992][ T3182] __device_attach_driver+0x1c2/0x220 [ 227.333161][ T3182] bus_for_each_drv+0x162/0x1e0 [ 227.338098][ T3182] __device_attach+0x21a/0x360 [ 227.343402][ T3182] bus_probe_device+0x1e4/0x290 [ 227.348333][ T3182] device_add+0xaf1/0x1900 [ 227.353015][ T3182] usb_set_configuration+0xec5/0x1740 [ 227.358633][ T3182] usb_generic_driver_probe+0x9d/0xe0 [ 227.364776][ T3182] usb_probe_device+0xc6/0x1f0 [ 227.369539][ T3182] really_probe+0x281/0x6d0 [ 227.374552][ T3182] driver_probe_device+0xfe/0x1d0 [ 227.379875][ T3182] __device_attach_driver+0x1c2/0x220 [ 227.385966][ T3182] bus_for_each_drv+0x162/0x1e0 [ 227.391498][ T3182] __device_attach+0x21a/0x360 [ 227.396652][ T3182] bus_probe_device+0x1e4/0x290 [ 227.401811][ T3182] device_add+0xaf1/0x1900 [ 227.406320][ T3182] usb_new_device.cold+0x753/0x103d [ 227.411734][ T3182] hub_event+0x1eca/0x38f0 [ 227.417654][ T3182] process_one_work+0x965/0x16a0 [ 227.422777][ T3182] worker_thread+0x96/0xe20 [ 227.428100][ T3182] kthread+0x3b5/0x4a0 [ 227.432852][ T3182] ret_from_fork+0x24/0x30 [ 227.437650][ T3182] [ 227.440086][ T3182] Freed by task 3182: [ 227.444511][ T3182] save_stack+0x1b/0x40 [ 227.450451][ T3182] __kasan_slab_free+0xf7/0x140 [ 227.455559][ T3182] kfree+0x109/0x2b0 [ 227.459453][ T3182] device_release+0x71/0x200 [ 227.464176][ T3182] kobject_put+0x1c8/0x2f0 [ 227.469099][ T3182] cdev_device_del+0x69/0x80 [ 227.473992][ T3182] joydev_disconnect+0x3d/0xb0 [ 227.479030][ T3182] __input_unregister_device+0x1b0/0x430 [ 227.484866][ T3182] input_unregister_device+0xb4/0xf0 [ 227.490283][ T3182] hidinput_disconnect+0x15e/0x3d0 [ 227.495790][ T3182] hid_disconnect+0x13f/0x1a0 [ 227.501306][ T3182] hid_hw_stop+0x12/0x70 [ 227.506154][ T3182] hid_device_remove+0xed/0x240 [ 227.511401][ T3182] device_release_driver_internal+0x231/0x500 [ 227.517734][ T3182] bus_remove_device+0x2dc/0x4a0 [ 227.522829][ T3182] device_del+0x481/0xd30 [ 227.527827][ T3182] hid_destroy_device+0xe1/0x150 [ 227.533295][ T3182] usbhid_disconnect+0x9f/0xe0 [ 227.538373][ T3182] usb_unbind_interface+0x1bd/0x8a0 [ 227.544315][ T3182] device_release_driver_internal+0x432/0x500 [ 227.550818][ T3182] bus_remove_device+0x2dc/0x4a0 [ 227.556300][ T3182] device_del+0x481/0xd30 [ 227.561088][ T3182] usb_disable_device+0x211/0x690 [ 227.566910][ T3182] usb_disconnect+0x284/0x8d0 [ 227.572392][ T3182] hub_event+0x17ca/0x38f0 [ 227.577600][ T3182] process_one_work+0x965/0x16a0 [ 227.583778][ T3182] worker_thread+0x96/0xe20 [ 227.588379][ T3182] kthread+0x3b5/0x4a0 [ 227.592716][ T3182] ret_from_fork+0x24/0x30 [ 227.597310][ T3182] [ 227.599839][ T3182] The buggy address belongs to the object at ffff88804f2d0000 [ 227.599839][ T3182] which belongs to the cache kmalloc-8k of size 8192 [ 227.613955][ T3182] The buggy address is located 336 bytes inside of [ 227.613955][ T3182] 8192-byte region [ffff88804f2d0000, ffff88804f2d2000) [ 227.627985][ T3182] The buggy address belongs to the page: [ 227.633637][ T3182] page:ffffea00013cb400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea00013cb400 order:2 compound_mapcount:0 compound_pincount:0 [ 227.649545][ T3182] flags: 0xfffe0000010200(slab|head) [ 227.655007][ T3182] raw: 00fffe0000010200 ffffea00013cba08 ffffea00013cc708 ffff8880aa0021c0 [ 227.663871][ T3182] raw: 0000000000000000 ffff88804f2d0000 0000000100000001 0000000000000000 [ 227.672765][ T3182] page dumped because: kasan: bad access detected [ 227.679164][ T3182] [ 227.681483][ T3182] Memory state around the buggy address: [ 227.687400][ T3182] ffff88804f2d0000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.695598][ T3182] ffff88804f2d0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.704467][ T3182] >ffff88804f2d0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.712818][ T3182] ^ [ 227.719765][ T3182] ffff88804f2d0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.727896][ T3182] ffff88804f2d0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.736530][ T3182] ================================================================== [ 227.745115][ T3182] Disabling lock debugging due to kernel taint [ 227.752289][ T3182] Kernel panic - not syncing: panic_on_warn set ... [ 227.758933][ T3182] CPU: 0 PID: 3182 Comm: kworker/0:9 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 227.770341][ T3182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.780615][ T3182] Workqueue: usb_hub_wq hub_event [ 227.785651][ T3182] Call Trace: [ 227.788962][ T3182] dump_stack+0x18f/0x20d [ 227.793398][ T3182] ? __mutex_lock+0xf50/0x13c0 [ 227.798330][ T3182] panic+0x2e3/0x75c [ 227.802419][ T3182] ? __warn_printk+0xf3/0xf3 [ 227.807023][ T3182] ? preempt_schedule_common+0x5e/0xc0 [ 227.812766][ T3182] ? __mutex_lock+0x1033/0x13c0 [ 227.817833][ T3182] ? __mutex_lock+0x1033/0x13c0 [ 227.822689][ T3182] ? preempt_schedule_thunk+0x16/0x18 [ 227.828544][ T3182] ? trace_hardirqs_on+0x55/0x230 [ 227.833790][ T3182] ? __mutex_lock+0x1033/0x13c0 [ 227.838637][ T3182] ? __mutex_lock+0x1033/0x13c0 [ 227.844063][ T3182] end_report+0x4d/0x53 [ 227.848651][ T3182] kasan_report.cold+0xd/0x37 [ 227.853332][ T3182] ? __mutex_lock+0x1033/0x13c0 [ 227.858268][ T3182] __mutex_lock+0x1033/0x13c0 [ 227.863194][ T3182] ? print_usage_bug+0x240/0x240 [ 227.868253][ T3182] ? joydev_cleanup+0x21/0x190 [ 227.873009][ T3182] ? trace_hardirqs_off+0x50/0x220 [ 227.878282][ T3182] ? mutex_trylock+0x2c0/0x2c0 [ 227.883237][ T3182] ? mark_held_locks+0x9f/0xe0 [ 227.888222][ T3182] ? kfree+0x1eb/0x2b0 [ 227.892545][ T3182] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 227.900777][ T3182] ? kfree_const+0x51/0x60 [ 227.905182][ T3182] ? dev_attr_show+0x90/0x90 [ 227.909763][ T3182] ? joydev_cleanup+0x21/0x190 [ 227.914669][ T3182] joydev_cleanup+0x21/0x190 [ 227.921652][ T3182] joydev_disconnect+0x45/0xb0 [ 227.926511][ T3182] __input_unregister_device+0x1b0/0x430 [ 227.932139][ T3182] input_unregister_device+0xb4/0xf0 [ 227.938093][ T3182] hidinput_disconnect+0x15e/0x3d0 [ 227.943604][ T3182] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 227.949326][ T3182] hid_disconnect+0x13f/0x1a0 [ 227.954012][ T3182] hid_hw_stop+0x12/0x70 [ 227.958446][ T3182] hid_device_remove+0xed/0x240 [ 227.963300][ T3182] ? sony_register_touchpad.constprop.0+0x890/0x890 [ 227.970150][ T3182] ? hid_compare_device_paths+0xc0/0xc0 [ 227.975754][ T3182] device_release_driver_internal+0x231/0x500 [ 227.981840][ T3182] bus_remove_device+0x2dc/0x4a0 [ 227.986932][ T3182] device_del+0x481/0xd30 [ 227.991262][ T3182] ? device_link_add_missing_supplier_links+0x370/0x370 [ 227.998810][ T3182] ? mark_held_locks+0x9f/0xe0 [ 228.005877][ T3182] ? _raw_spin_unlock_irq+0x1f/0x80 [ 228.011080][ T3182] hid_destroy_device+0xe1/0x150 [ 228.016246][ T3182] usbhid_disconnect+0x9f/0xe0 [ 228.021004][ T3182] usb_unbind_interface+0x1bd/0x8a0 [ 228.026493][ T3182] ? __pm_runtime_idle+0xd1/0x320 [ 228.031821][ T3182] ? usb_autoresume_device+0x60/0x60 [ 228.037801][ T3182] device_release_driver_internal+0x432/0x500 [ 228.044659][ T3182] bus_remove_device+0x2dc/0x4a0 [ 228.049984][ T3182] device_del+0x481/0xd30 [ 228.054841][ T3182] ? device_link_add_missing_supplier_links+0x370/0x370 [ 228.062475][ T3182] ? usb_remove_ep_devs+0x3e/0x80 [ 228.067578][ T3182] ? remove_intf_ep_devs+0x13f/0x1d0 [ 228.073078][ T3182] usb_disable_device+0x211/0x690 [ 228.078314][ T3182] usb_disconnect+0x284/0x8d0 [ 228.083310][ T3182] hub_event+0x17ca/0x38f0 [ 228.088196][ T3182] ? hub_port_debounce+0x260/0x260 [ 228.093476][ T3182] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 228.099373][ T3182] ? debug_smp_processor_id+0x2f/0x185 [ 228.105389][ T3182] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 228.111275][ T3182] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 228.117248][ T3182] process_one_work+0x965/0x16a0 [ 228.122376][ T3182] ? lock_release+0x800/0x800 [ 228.127477][ T3182] ? pwq_dec_nr_in_flight+0x310/0x310 [ 228.134128][ T3182] ? rwlock_bug.part.0+0x90/0x90 [ 228.139992][ T3182] worker_thread+0x96/0xe20 [ 228.145352][ T3182] ? process_one_work+0x16a0/0x16a0 [ 228.150873][ T3182] kthread+0x3b5/0x4a0 [ 228.155569][ T3182] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 228.163533][ T3182] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 228.169526][ T3182] ret_from_fork+0x24/0x30 [ 228.176656][ T3182] Kernel Offset: disabled [ 228.182037][ T3182] Rebooting in 86400 seconds..